Try common default accounts (e.g. guest, bbs, lp, adm, admin, sysadm). 

The following are possible things to probe for: more sendmail bugs, tftp, more
ftp tests, finger probe, ypset , nfs problems (guess file handles, export
access list => 256 bytes).

Clean up the Log file so it is more readable and comprehensive.  For example,
FTP will tell you whether or not it has anonymous FTP and if the ftp site has
flaws, rather than just showing the results of the commands.

Make it so you can 'iss hostname' and it will scan that host and any related
hosts in that domain that would provide access to the hostname you specified.

